frodovdr
/
csf-post-docker
mirror of https://github.com/juliengk/csf-post-docker.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Fix order of rules

This commit is contained in:
Julien Kassar 2016-11-01 17:48:40 -04:00
parent 4c4fa1fe63
commit fabdd8010b
1 changed files with 4 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docker.sh
View File

@ -45,7 +45,6 @@ iptables -N DOCKER-ISOLATION
iptables -t nat -N DOCKER
iptables -A DOCKER-ISOLATION -j RETURN
iptables -A FORWARD -j DOCKER-ISOLATION
add_to_forward ${DOCKER_INT}
@ -66,8 +65,8 @@ if [ `echo ${containers} | wc -c` -gt "1" ]; then
DOCKER_NET_INT="br-$(docker inspect -f \"{{.NetworkSettings.Networks.${netmode}.NetworkID}}\" ${container} | cut -c -12)"
ipaddr=`docker inspect -f "{{.NetworkSettings.Networks.${netmode}.IPAddress}}" ${container}`
add_to_docker_isolation ${DOCKER_INT} ${DOCKER_NET_INT}
add_to_docker_isolation ${DOCKER_NET_INT} ${DOCKER_INT}
add_to_docker_isolation ${DOCKER_INT} ${DOCKER_NET_INT}
for net in `docker network ls | awk '{ print $2 }' | grep -Ev "bridge|host|null|ID|${netmode}"`; do
dint="br-$(docker network inspect -f '{{.Id}}' ${net} | cut -c -12)"
@ -109,3 +108,6 @@ if [ `echo ${containers} | wc -c` -gt "1" ]; then
fi
done
fi
iptables -A DOCKER-ISOLATION -j RETURN
iptables -t nat -I DOCKER -i ${DOCKER_INT} -j RETURN